I got your site will researching a hack on my site. I am not sure about the tech aspects of things here. My site was hacked by the same nutcase. I had it restored by my provider, then upgraded to the new wordpress and changed passwords but now the site is down again. I can get in to my FTP and admin page for now, but the scum removed all my posts. They are backed up by my host for one week at a time, but man… anyway…

Do you have any clue where the code is hidden or what to look for? I see you mention this: mysql config

Should I tell my host service about this???

Good Luck
Bill